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METHOD AND SYSTEM FOR ACCESSING LOW-LEVEL RESOURCES IN A 

NETWORK DEVICE ~~ 

FIELD OF THE INVENTION 
The present invention relates to the field of computer data networking and a method 
5 and system for accessing low-level resources in a network device. 

BACKGROUND OF THE INVENTION 
The use of layered data communications protocols promotes system interoperability, 
vendor portability and simplicity in system integration. Each protocol layer operates at a 
different layer of abstraction and performs different types of data manipulation and 

10 formatting. Because each layer is concerned with events at its own level of abstraction, 
different software designers can work together to design the protocols. Layers of the 
network protocol can also replaced individually without significant communication 
incompatibilities problems arising. 

The Internet Protocol (IP) stack or IP stack is a widely used layered communication 

15 protocol Applications use the IP stack to transmit and receive data over a variety of 
different local and wide area networks. Typically, a transmitting application passes 
application data to a transport layer in the IP stack, which in turn adds routing information to 
the data and passes the results to a data link layer. The data link layer also adds additional 
header information and passes the resulting information to a physical layer, where it is finally 

20 transmitted over the network. 

A receiving application associated with a receiving IP stack receives and processes 
the information. Each layer of the receiving IP stack performs various communication 
functions and format conversions in reverse going from the physical layer, the data link layer, 
the network layer, the transport layer, and then to the receiving application. In the 

25 conventional network, applications send and receive messages from each other and use the IP 
stack as a conduit for data. Notwithstanding these messages, other information being 
transmitted between the sending and receiving IP stacks is not typically made available to 
either the sending or receiving applications. 

While layered protocols such as used in the conventional IP stack have some 

30 advantages, they are have been obtained by lowering programmatic flexibility. For example, 
application data is encapsulated with protocol-generated headers whose content cannot be 
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accessed and controlled by the application itself. Applications are masked from the inner 
operation of a network protocol and network operation. This inflexibility makes it difficult 
for an application to send data encapsulated with a non-standard header when required or 
monitor operation of the network. 

SUMMARY OF THE INVENTION 
In one aspect of the invention, a method and system provides access to information 
about a resource associated with a network device. The method and system receives a 
request from an application for information about a resource associated with a network 
device, selects a layer in a network protocol stack having multiple layers for communicating 
with the requested resource associated with the network device, establishes an inner layer 
socket for communicating at the selected layer using an inner layer application programming 
interface (IL API) and a socket identifier associated with the requested resource, wherein the 
inner layer socket communicates using the selected layer and bypasses other layers in the 
network protocol stack, transmits the request for information about the resource through the 
inner layer socket and the socket identifier, receives the information about the resource in 
response to the transmission made through the inner layer socket, and passes the information 
about the resource through the inner layer socket to the application making the request. 

BRIEF DESCRIPTION OF THE DRAWINGS 
The features and aspects of the present invention will become more fully apparent 
from the following detailed description, appended claims, and accompanying drawings in 
which: 

FIG. 1 is a block diagram illustrating a network using an inner layer application 
programming interface (IL API) to communicate between nodes on the network. 

FIG. 2 is a block diagram demonstrating the various protocols an application can 
interface with using the IL API. 

FIG. 3 is a block diagram illustrating how the IL API works to provide access to the 
Internet Protocol (IP) stack. 

FIG. 4. is a block diagram depicting a computer system that provides the IL API and 
IP stack to applications. 

FIG. 5 is a flow-chart diagram illustrating the operations associated with 
communicating over the IP stack using the IL API. 
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FIG. 6 is a flow-diagram depicting the operations used to access information about a 
resource associated with a network device. 

DETAILED DESCRIPTION OF THE INVENTION 
FIG. 1 is a block diagram illustrating a network using an inner layer application 
5 programming interface (IL API) to communicate between nodes on a network 1 00. Network 
100 includes a transmit application 102 with a corresponding TCP/IP stack 104, a data link 
106 and a inner layer application programming interface (IL API) 108 facilitating 
communication between transmit application 102 and layers within TCP/IP stack 104. 
Further, network 100 also includes a first intermediate gateway or router node represented by 

10 IP stack 1 10 and data link 1 12 and a second intermediate gateway or router node represented 
by IP stack 1 14 and data link 1 16. Receive application 1 18 in network 100 has a TCP/IP 
stack 120, data link 122 and a IL API 124. Physical connection 126 provides connection to 
each of these nodes through their respective data link layers using a physical access protocol 
such as Carrier Sense Multiple Access/Collision Detect (CSMA/CD). 

15 Conventional layered communications provides applications with application to 

application or peer-to-peer or communication capabilities. Information at the lower layers of 
the protocol stack are masked from the application through abstract interfaces. This 
simplifies network programming over the IP stack but does not provide much flexibility if 
access to these other layers is desired. IL API 108 and IL API 124 provides this 

20 communication capability to both transmit application and receive application 1 18. For 
example, transmit application 102 and receive application 1 18 have access to IP stack 1 10 
and IP stack 1 14 directly using their respective IP API. Additionally, transmit application 
102 and receive application 118 also have access to other protocol layers using the IP API 
such as data link 1 12 and data link 1 16. 

25 FIG. 2 illustrates many different types of network information available at these 

different layers in the protocol stack. This block diagram illustrates an application 202 
passing through an IL API to gain access to a transport layer 206, a network layer 208, and a 
data link layer 210. At transport layer 206, application 202 has access to the transport 
protocols TCP 212, UDP 214, and other transport 216. TCP 212 or Transmission Control 

30 Protocol is a connection-oriented protocol that provides a reliable, full-duplex, byte stream 
for a user process. Most conventional Internet applications use TCP 212 and allow TCP 212 
to interface with the IP layers below. UDP 212 or User Datagram Protocol is a 
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connectionless protocol also for user processes, however, it does not guarantee that UDP 
datagrams will ever reach their intended destination. Because TCP and UDP both access the 
IP layer the protocol is often referred to as simply TCP/IP. 

Network layer 208 provides application 202 with access through IL API 204 to 
5 information carried over Appletalk 218, IPv4 220, IPv6 222, and IPX 224. These protocols 
provide packet delivery services and routing capabilities for transport protocols such as TCP 
212 and UDP 214. Networks based on Appletalk 218 and IPX 224 can be integrated to work 
with the TCP and UDP transport protocols. In addition, routers, switches, hubs and other 
network devices exchange status and network routing information describing network layer 
10 resources using ICMP (Internet Control Message Protocol) and IGMP (Internet Gateway 
Message Protocol). Appletalk 218 provides packet delivery services primarily to computers 
designed by Apple Computer of Cupertino California. IPv4 220 (version 4) provides 32-bit 
addresses and IPv6 222 (version 6) provides 64-bit addresses in the Internet Protocol (IP) 
defined in specification DOD-STD-1777. Further references to the IP protocol includes 
15 these additional protocols described above. 

Application 202 also has access to data link layer 210 through IL API 204. Fiber 
distributed data interface (FDDI) 226 is a standard for data transmission on fiber optic lines 
in a local area network. FDDI 226 protocol is based on the token ring protocol and in 
addition can support thousands of users. In addition, application 202 can also access 
information from Ethernet 228 through IL API 204. Ethernet 228 is a widely-installed local 
area network technology and specifies sharing physical access over coaxial cable or special 
grades of twisted pair wires providing a wide range of transmission speeds. Devices 
connected to an Ethernet network generally compete for access to the physical medium using 
the CSMA/CD protocol. 
25 FIG. 3 is a block diagram illustrating how the IL API works to provide access to a 

Internet Protocol (IP) stack 300. IP stack 300 includes application 302, transport layer 304, 
network layer 306, data link layer 308 each connected to IL API 3 12. In one 
implementation, layers in IP stack 300 product an Ethernet packet 310 with a data payload 
and headers from each of the various layers. 

In conventional network communication, application 314 and application 316 
communicate directly with a network protocol with either TCP 318 or UDP 320 for a 
connection or connectionless type communication. As an alternative, both application 3 14 
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and application 316 can communicate with transport layer 38 through TCP Socket 334 in IL 
API 312. Using IL API 3 12 to access the transport layer as well as other inner layers of the 
network protocol provides a more uniform interface to the stack. 

Application 314 and application 316 can use IL API 312 to access network layer 306 
5 and data link layer 308 in ways previously unavailable. For example, application 3 14 can 
access Internet Control Message Protocol (ICMP)/Internet Group Multicast Protocol (IGMP) 
324 resources and interact with routers, switches, hubs, gateways, and hosts communicating 
with each other about errors and system control ICMP provides message control and error- 
reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet 

10 Protocol (IP) datagrams that IL API 312 provides to an application. On conventional 

systems, this information is processed by the TCP/IP protocol and not available directly to 
the application. IGMP is used to support multicasting between nodes on a network and 
provides information to applications through IL API 3 12 in a similar manner. Application 
314 also has access to ARP 326 and RARP 328 resources. Application 314 opens a socket 

15 using IP Socket 336 interface and establishes a direct connection with network layer 306. 

Because application 314 bypasses transport layer 318, ARP 326 and RARP 328 information 
is exposed and available for application 314 to process. For example, ARP 326 information 
includes Media Access Control (MAC) addresses associated with each Ethernet device on a 
network. 

20 Application 314 operates in a similar manner with respect to data link layer 308. To 

gain access to data link layer 308, application 314 establishes a session directly to data link 
layer 308 through link socket 338. Once the session through link socket 338 is created, the 
application has access to information in data link 330 and physical layer 332. For example, 
application 314 can create customized headers for an Ethernet packet 310 creating TCP 

25 Header and IP Header as illustrated in Ethernet packet 3 1 0 in FIG. 3. Ethernet header and 
Ethernet trailer are added by an Ethernet type data link 330. This provides an application 
with additional flexibility when developing network management software or developing 
other routines that need access to lower layers of the network protocol stack. 

FIG. 4. is a block diagram depicting a computer system 400 that provides the IL API 

30 and IP stack to applications. Computer system includes a memory 402, a processor 404, a 
network communication port 406, a secondary storage 408, and input-output ports 410. 
Processor can be a general purpose processor such as manufactured by Intel Incorporated of 



5 



Attorney's Docket No. 10360-082001 
Client Ref.: BA0448 



Santa Clara California or can be a specialized ASIC or other type of processor device. 
Network communication port 406 can be implemented as a Ethernet card or built-in 
communication port on a computer and secondary storage 408 is a hard-disk, CDROM, or 
other mass storage device. Input-output ports includes ports for corresponding peripheral 
5 devices such as keyboard, mouse, printer, display, and scanner. 

Memory 402 includes an application 414, an inner layer API (EL API) 416, inner 
layer extensions, 418, virtual machine runtime environment 420, TCP/IP protocol 422, 
network resources 423 and operating system 424. Application 414 is an application that 
access one or more different layers of a network protocol stack such as TCP/IP protocol 422. 

10 Generally, application 414 should be a user application but may need to be run with 
increased permissions such as "root" or "superuser" due to the sensitive information 
accessible within the inner layers of TCP/IP protocol 422. 

Inner layer API 416 is the interface routines linked into application 414 that provides 
direct access to the transport, the network, data link and physical layers in the protocol stack. 

15 Inner layer extensions 418 include any supporting routines necessary to make the IL API 312 
available on the given platform. In some cases, this could involve recompiling an operating 
system kernel to include these particular functionalities not previously available to 
applications. In an object-oriented implementation, such as using the Java programming 
language by Sun Microsystems of Mountain View California, these extensions can be 

20 dynamically loaded at run-time or immediately when they are loaded into the overall system. 
Because Java allows dynamic loading of routines, inner layer extensions 418 can be loaded 
as application 414 requires. 

Virtual machine runtime environment 420 is typically used with an object-oriented 
programming language such as Java. If a non-object oriented or interpreted programming 

25 language is not being used, then virtual machine runtime environment 420 may not be 

required. For Java, a Java Virtual Machine or JVM simulates a virtual machine and provides 
hardware independent computing capabilities in addition to dynamic loading of libraries, 
applications, and applets in real-time over a network. 

TCP/IP 422 is the conventional layered protocol stack typically available on most 

30 computers and computer-like platforms. As previously mentioned, TCP/IP generally only 
provides applications with access to the transport layer but with IL API 416, application 414 
accesses the network layer, the data link layer, and the physical layer in addition to the 
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transport layer. Network resources 423 represents the various tables and other network 
resources on a network device. These resources include information stored in routing tables, 
ARP tables, ICMP/IGMP related tables, tables for storing physical port information and any 
other tables or resources used to manage and or describe an aspect of a network device. 
5 Operating system 424 manages resources on computer system 400 so they are used 

efficiently and uniformly. 

FIG. 5 is a flow-chart diagram illustrating the operations associated with 
communicating over the IP stack using the IL API. Initially, an application creates a 
datagram to be transmitted over a network (502). The datagram or packet is self-contained, 

10 independent entity of data carrying sufficient information to be routed from the source to the 
destination computer without reliance on earlier exchanges between this source and 
destination computer and the transporting network. The packet needs to be self-contained 
without reliance on earlier exchanges because there is no connection of fixed duration 
between the two communicating points as there is, for example, in most voice telephone 

15 conversations. This kind of protocol is therefore referred to as connectionless. 

Given several layers to communicate with, application selects a network layer to 
establish communication (504). In part, the layer selected depends on the type of datagram 
the application has created. If the application creates a transport session using a transport 
socket such as TCP 334 in FIG. 3, the application provides the data and necessary headers. 

20 However, a network session uses a network socket such as IP Socket 446 in FIG. 3 and the 
application needs to create the appropriate network layer TCP header or UDP header around 
the data or payload section of each packet. Similarly, if the application creates a link layer 
session using link socket 338 then the application must also include IP header information in 
the packet. 

25 The application also selects a layer in the network protocol stack depending on the 

layer a resource associated with the network device uses for communication. For example, 
the ICMP and IGMP tables are resources that use the IP protocol because they communicate 
that the network layer in the protocol stack. Similarly, an ARP table is a resource that uses 
the link layer to communicate information about the network device, in particular an Ethernet 

30 or MAC address of the network device. 

The application then opens a socket at the selected layer of the network protocol 
using the IL API (506). Often, the communication occurs over a "raw" type of socket rather 
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than a "cooked" socket. The information is considered raw because control characters and 
other information in the data stream are not stripped out or interpreted by other programs 
before being delivered to the application. For example, two common types of packets sent or 
received over raw sockets are ICMP packets and IGMP packets. Specific resources such as 
routing tables, ICMP and IGMP tables are identified with predetermined or well-known 
socket identifiers. Applications open an inner layer socket using these specific socket 
identifiers to access the information in these particular resources. Alternatively, the 
application can open inner layer sockets with other socket identifiers to intercept other types 
of information being transmitted across the particular network protocol layer. 

Communication continues between the application and the selected layer or specific 
resource until the application ends or the connection is terminated (508). 

FIG. 6 is a flow-diagram depicting the operations used to access information about a 
resource associated with a network device. Initially, a network device receives a request 
from an application for information about a resource associated with a network device (602). 
The resource can be a routing table, a table with ICMP or IGMP information, a table of 
physical ports on a network device, an ARP table of MAC addresses or any other resource 
associated with a network device. The request typical selects a layer in a network protocol 
stack for communicating with the requested resource on the network device (604). The 
application then establishes an inner layer socket for communicating at the selected layer 
using an inner layer application programming interface (IL API) and a socket identifier 
associated with the requested resource (606). The inner layer socket communicates using the 
selected layer and bypasses other layers in the network protocol stack. Once established, the 
inner layer socket transmits the request for information about the resource through the inner 
layer socket and the socket identifier (608). The IL API receives the information about the 
resource from the network device in response to the transmission made through the inner 
layer socket (610) and passes the information about the resource through the inner layer 
socket to the application making the request. 

In one implementation using the Java object-oriented programming environment, an 
application may contain source code that generates and utilizes Java link layer sockets as 
shown in the following code example A. 
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Code Example A 

Ethernet Packet ep = New Ethernet Packet (data, destination Ethernet Address); 
Ethernet Socket s = New Ethernet Socket (source Ethernet Address); 
5 Byte size; 

Byte buffer = new byte[size]; 

s.send(ep); 

s.rcv(buf); 

The Code Example A details the use of a combination send/receive Java link layer 
10 socket "s" whose address is "source Ethernet Address". A datagram packet "ep" is created 
for use in an Ethernet networking environment, where "ep" is intended to be sent to a 
destination "destination Ethernet Address". A receive buffer "buf' is created for socket "s", 
and given size "size". After "ep" is sent by Java link layer socket "s", Java link layer socket 
"s" receives any return packets in buffer "buf. 
15 Another example of the use of Java link layer sockets is given below in code example 

B. 

Code Example B 

Ethernet Address destination = new Ethernet Address; 

Ethernet Address source = new Ethernet Address; 
20 Byte [ ] buf - new byte [2000] ; 

Ethernet Packet ep = new Ethernet Packet (buf, destination); 
// put the data into the buffer buf 

Ethernet Socket es = new Ethernet Socket (source); 

es.send(ep); 
25 es.receive(ep); 

// now look at data in the buffer buf 

In the code example B, a buffer "buf ' is utilized as a bi-directional send/receive 

buffer for supporting the socket "es". 

While specific implementations have been described herein for purposes of 

30 illustration, various modifications may be made without departing from the spirit and scope 

of the invention. For example, implementations and examples are provided with reference to 

TCP/IP however, an alternate implementation could also be adapted to work with the Open 

Systems Interconnection (OSI)network model. In the OSI communication model, IP is in 
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layer 3, and other layers are as illustrated in FIG. 3. Inner sockets for the transport, network 
and data link layer are described but an inner socket for a physical layer could also be 
implemented. The physical layer would provide information about the ports on a network 
device and information about the physical media being used. Additional implementations 
5 could be created using conventional procedural programming languages such as "C" as well 
as object-oriented programming environments/languages such as Java or C++. Furthermore, 
although aspects of the present invention are described as being stored in memory and other 
storage mediums, one skilled in the art will appreciate that these aspects can also be stored on 
or read from other types of computer-readable media, such as secondary storage devices, like 
10 hard disks, floppy disks, or CD-ROM; a carrier wave from the Internet; or other forms of 
RAM or ROM. Accordingly, the invention is not limited to the above-described 
embodiments, but instead is defined by the appended claims in light of their full scope of 
equivalents. 
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